To stop all client activity you can use:
The first command stops all nfs daemons, and the second restarts them. In other words, do NOT use
And, you may want to do this on the (NIM) server instead/also/first.
Note: # rmnfsmnt -f ...
will remove the entry from /etc/filesystems
to check on a nfs server
# rpcinfo -p nfs_server | grep nfs
This will tell you which nfs protocols are supported AND active # showmount -e nfs_server
This will tell you what is (still) exported.
The message you are getting (NFS server ...not responding, still trying) implies that the rpc communication is "down" for whatever reason - OR - the directory is no longer exported.
This User Gave Thanks to MichaelFelt For This Post:
Hi,
I've mounted one of the file systems on another machine manually on /mnt located on my machine , after finishing my work i want to umount this /mnt , but all the time it says
" nfs umount : /mnt : is busy " ,although it's not.
so i tried to stop & start Nfs services manually (Incld :... (4 Replies)
For having shared file system i've been using nfs ,but regarding this i've some problem ,when i execute "df -ak" i can see the shared file system & i can also go there & list files ,but when i want to create anything in this area (Incld. file ,dir ....) i get permission denied. (i've shared related... (6 Replies)
I am having problem mounting my nfs mount on my sun solaris 8 through automount using the automaster file. this has been working fine until today, when my workstation tries to mount the nfs
mount the following error is logged in /var/adm/message
NFS lookup failed for server comserv: error 7... (2 Replies)
Got a prob..
I am trying to export a directory and mount it on to a server using NFS. My exporting goes fine as I am able to see the shares through "exportfs -v"
But when I am trying to mount the directory on a the client.. I get an error..
"system call error number - 1"
pls help....
... (3 Replies)
AIX's NFS client sends requests on high port numbers by default, and
Linux rejects this as the security exposure it is. On AIX i'm use:
nfso -o nfs_use_reserved_ports=1
But how i can setup it in autorun? /etc/rc.local right way ? (1 Reply)
Hi Gurus,
I am trying to share certain file with NFS.
Requirement is to give access to root of another host to some file system which is shared through NFS.
Step1.
I entered the below line in /etc/dfs/dfstab
share -F nfs -o root=sun2 /usr/src
... (3 Replies)
Hi All,
I have shared a directory from Linux machine which will be accessible from other linux servers without any problem. But when I try to access ( ie mount) on other Solaris machine, it is giving below error.
#mount -F nfs IP of nfs server:/share /localmountpoint
nfs mount : mount:... (1 Reply)
Dear all,
in one of our SLES 10 NFS Client there is this statement in its
/etc/fstab:
NFS-Server:/tools /tools nfs hard,bg,intr,noatime 0 0
In a case where a reboot of the NFS Server and this client is necessary
- due to some reasons we have to boot the client first and then it's
NFS... (2 Replies)
Hello everyone
I need to share a file system with two Aix boxes, the version is 5.3 tl9.
I create the nfs and I can see the files from both servers, but the problem with one of them is that I can write on the file or If I create a new one I canīt.
On the server that I create the... (5 Replies)
hello,
i have an AIX6.1.7.2 machine that it was upgraded recently from AIX5.3.9.4.
when i kill system services that should restart automatically like /usr/sbin/cron it doesnt start.
i checked my /etc/inittab file and i confirmed that this service is in respawn status so when i kill this process... (2 Replies)
Discussion started by: omonoiatis9
2 Replies
LEARN ABOUT BSD
nfssec
nfssec(5)nfssec(5)NAME
nfssec - overview of NFS security modes
The mount_nfs(1M) and share_nfs(1M) commands each provide a way to specify the security mode to be used on an NFS file system through the
sec=mode option. mode can be sys, dh, krb5, krb5i, krb5p, or none. These security modes can also be added to the automount maps. Note that
mount_nfs(1M) and automount(1M) do not support sec=none at this time. mount_nfs(1M) allows you to specify a single security mode;
share_nfs(1M) allows you to specify multiple modes (or none). With multiple modes, an NFS client can choose any of the modes in the list.
The sec=mode option on the share_nfs(1M) command line establishes the security mode of NFS servers. If the NFS connection uses the NFS Ver-
sion 3 protocol, the NFS clients must query the server for the appropriate mode to use. If the NFS connection uses the NFS Version 2 proto-
col, then the NFS client uses the default security mode, which is currently sys. NFS clients may force the use of a specific security mode
by specifying the sec=mode option on the command line. However, if the file system on the server is not shared with that security mode, the
client may be denied access.
If the NFS client wants to authenticate the NFS server using a particular (stronger) security mode, the client wants to specify the secu-
rity mode to be used, even if the connection uses the NFS Version 3 protocol. This guarantees that an attacker masquerading as the server
does not compromise the client.
The NFS security modes are described below. Of these, the krb5, krb5i, krb5p modes use the Kerberos V5 protocol for authenticating and pro-
tecting the shared filesystems. Before these can be used, the system must be configured to be part of a Kerberos realm. See SEAM(5).
sys Use AUTH_SYS authentication. The user's UNIX user-id and group-ids are passed in the clear on the network, unauthenticated by the
NFS server. This is the simplest security method and requires no additional administration. It is the default used by Solaris NFS
Version 2 clients and Solaris NFS servers.
dh Use a Diffie-Hellman public key system (AUTH_DES, which is referred to as AUTH_DH in the forthcoming Internet RFC).
krb5 Use Kerberos V5 protocol to authenticate users before granting access to the shared filesystem.
krb5i Use Kerberos V5 authentication with integrity checking (checksums) to verify that the data has not been tampered with.
krb5p User Kerberos V5 authentication, integrity checksums, and privacy protection (encryption) on the shared filesystem. This provides
the most secure filesystem sharing, as all traffic is encrypted. It should be noted that performance might suffer on some systems
when using krb5p, depending on the computational intensity of the encryption algorithm and the amount of data being transferred.
none Use null authentication (AUTH_NONE). NFS clients using AUTH_NONE have no identity and are mapped to the anonymous user nobody by
NFS servers. A client using a security mode other than the one with which a Solaris NFS server shares the file system has its
security mode mapped to AUTH_NONE. In this case, if the file system is shared with sec=none, users from the client are mapped to
the anonymous user. The NFS security mode none is supported by share_nfs(1M), but not by mount_nfs(1M) or automount(1M).
/etc/nfssec.conf NFS security service configuration file
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|Availability |SUNWnfscr |
+-----------------------------+-----------------------------+
automount(1M), mount_nfs(1M), share_nfs(1M), rpc_clnt_auth(3NSL), secure_rpc(3NSL), nfssec.conf(4), attributes(5)
/etc/nfssec.conf lists the NFS security services. Do not edit this file. It is not intended to be user-configurable.
13 Apr 2005 nfssec(5)